{...}: {
  users.users.pim.extraGroups = ["audio"];
}